Learn Oracle From Oracle

Pete Finnigan
Oracle Database Security Audit
Oracle University Special on 3-4 November 2008
Introduction:
This Special teaches the delegates how to confidently perform a security audit on an Oracle
database. The Special gets the delegates up to speed on the reasons Oracle databases are
invariably insecure. Everyone is brought up to the same level in terms of where to look, what to look
for and why. The Special shows how a security audit is planned, how to prepare yourself for it, your
staff and your environments. The Special is aimed at the fundamentals of how to review a database
and why; it does not focus on simply running tools. It is important to understand why something is an
issue, to understand how to check that its an issue and importantly understand the implications in
respect to your own databases and applications before using pre-built or commercial tools.
The course is up to date using all supported versions of Oracle from 9iR2 through Oracle 11g.
Objectives:
Understand why an Oracle database and application may have been configured insecurely
Understand why and how hackers can attack a database
Enable the delegate to think like a hacker and better understand how to secure a database
Enable the delegate to plan an audit and implement all of the ground work to carry out an
audit
Enable the delegate to perform a security audit using the basic principals applied manually
Understand how to assess the data gathered during an audit and locate and correct the
issues
Document fully the audit process and present the results to management
Audience:
DBAs
Developers
Designers
IT managers
Security Managers
Auditors
Prerequired skills:
Some knowledge of Oracle from a developer or DBA or security professional level. Ideally the
delegates should understand how to read simple SQL queries and PL/SQL code. The delegate
should also understand how to perform simple queries and commands on a Unix operating system.
The first lesson includes a primer session to bring everyone up to the same level quickly.

Learn Oracle From Oracle

Topics:

Oracle security tools, checklists and more

Planning an audit, setting up for an audit, gathering tools, prepping laptop, people, access
Software installed, versions and attack surface
Auditing the Oracle database association with the file system
Audit Oracle networking
Audit the database configuration
Specialist considerations, Credit cards, personally identifiable data and more
Review the audit trail
Data analysis, vulnerability assessment

Biography:
Pete Finnigan is a world leader in the security assessment of Oracle databases, Pete was one of the
early adopters of security for Oracle databases and has worked tirelessly to promote and progress
the field.
Pete is also the founder of PeteFinnigan.com Limited, a company renowned for database security
excellence. Pete Finnigan is the author of the book Oracle security step-by-step A survival guide
for Oracle security.
Pete is also the author of a training course that teaches how to perform an Oracle security audit. Pete
has published many times on many facets of the subject of Oracle security and is a frequent speaker
on the world stage on the subject of Oracle and security including Blackhat, UKOUG, OUG Ireland,
OUG Scotland, Northern UK Security Group, RISK 2008 (Oslo), PSOUG, InfoSec and more. Pete
also runs his very popular website www.petefinnigan.com that is dedicated to securing Oracle
databases. He has also helped define standards that have influenced governments positions on how
to secure their databases.

Booking and assistance:

You can book on our Dutch language website: www.oracle.com/nl/education/specials/
or request a registration form.
Contact the Education Service Desk on
telephone number:
+31 (0)30 66 99 244
esd_nl@oracle.com.
e-mail:
We will be happy to assist.